CA Export
CA ItemPolicy 1Policy 2Policy 3Policy 4Policy 5Policy 6Policy 7Policy 8Policy 9
NameMFA for User access controlBlock Legacy AuthenticationPhysical location access controlDevice Compliance Check – MacOS DevicesDevice Compliance Check – Windows DevicesMAM-WE App Protection Compliance Check – Mobile DevicesBlock unsupported devicesBlock high risk usersRequire password change for medium risk users
PolicyID
StatusEnabledEnabledEnabledEnabledEnabledEnabledEnabledEnabledEnabled
Users
UsersIncludeAllAllAllAllAllAllAllAllAll
UsersExclude
Cloud apps or actions
ApplicationsIncludedAllAllAllAllAllAllAllAllAll
ApplicationsExcluded
userActions
AuthContext
Conditions
UserRiskhighmedium
SignInRiskhigh
PlatformsIncludemacOSwindowsandroid, iOSwindowsPhone, linux
PlatformsExclude
LocationsIncludedAll
LocationsExcludedUK
ClientAppsallexchangeActiveSync, otherallallallallallallall
DevicesIncluded
DevicesExcluded
DeviceFilters
GrantControls
BuiltInControlsmfablockblockcompliantDevicecompliantDevicecompliantApplicationblockblockpasswordChange
TermsOfUse
CustomControls
GrantOperatorORORORORORORORORAND
SessionControls
SessionControlsAdditionalProperties
ApplicationEnforcedRestrictionsIsEnabledTrue
ApplicationEnforcedRestrictionsAdditionalProperties
CloudAppSecurityType
CloudAppSecurityIsEnabled
CloudAppSecurityAdditionalProperties
DisableResilienceDefaults
PersistentBrowserIsEnabled
PersistentBrowserMode
PersistentBrowserAdditionalProperties
SignInFrequencyAuthenticationTypeprimaryAndSecondaryAuthentication
SignInFrequencyIntervaltimeBased
SignInFrequencyIsEnabledTrue
SignInFrequencyTypedays
SignInFrequencyValue7
SignInFrequencyAdditionalProperties